shippingszn 0.9.2 → 0.9.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -7
- package/dist/index.js +6 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -12,10 +12,10 @@ pnpm dlx shippingszn@latest
|
|
|
12
12
|
```
|
|
13
13
|
|
|
14
14
|
The CLI **never writes, modifies, or deletes** any files - it only reads.
|
|
15
|
-
Normal runs send one anonymous
|
|
15
|
+
Normal runs send one anonymous report-card summary with score, severity counts,
|
|
16
16
|
files scanned, scanner version, and safe stack tags. It never uploads source
|
|
17
|
-
code, paths, filenames, repo URLs, project names, secrets, handles, or
|
|
18
|
-
This
|
|
17
|
+
code, paths, filenames, repo URLs, project names, secrets, handles, emails, or
|
|
18
|
+
finding-level details. This Wall signal is automatic and not user-configurable.
|
|
19
19
|
|
|
20
20
|
Human output starts with a Launch Readiness Score, scope covered, and severity
|
|
21
21
|
counts. Run with `--json` to get the same score-and-counts summary in a
|
|
@@ -37,9 +37,9 @@ They unlock inside the Launch Fix Kit.
|
|
|
37
37
|
|
|
38
38
|
## Aggregate summary
|
|
39
39
|
|
|
40
|
-
Plain `npx shippingszn@latest` sends the
|
|
41
|
-
|
|
42
|
-
|
|
40
|
+
Plain `npx shippingszn@latest` sends the Wall summary automatically. The stored
|
|
41
|
+
row is anonymous and intentionally small: score, launch label, files scanned,
|
|
42
|
+
finding counts by severity, detected stack tags, scanner version, and timestamp.
|
|
43
43
|
|
|
44
44
|
For a scan-specific paid-report handoff, run `npx shippingszn@latest --proof`.
|
|
45
45
|
That uploads the canonical scan result, returns a proof URL plus a
|
|
@@ -155,7 +155,8 @@ default it makes one best-effort outbound request to post an anonymous aggregate
|
|
|
155
155
|
summary: score, launch label, files scanned count, finding counts by severity,
|
|
156
156
|
detected stack tags, scanner version, and timestamp. It never uploads source
|
|
157
157
|
code, file paths, filenames, project names, repo URLs, secrets, emails, handles,
|
|
158
|
-
or report contents. The aggregate summary is automatic
|
|
158
|
+
finding titles, evidence, or report contents. The aggregate summary is automatic
|
|
159
|
+
and not user-configurable.
|
|
159
160
|
|
|
160
161
|
## License
|
|
161
162
|
|
package/dist/index.js
CHANGED
|
@@ -4438,10 +4438,10 @@ Options:
|
|
|
4438
4438
|
This is the FREE preflight. It tells you launch debt exists. It does NOT tell
|
|
4439
4439
|
you what's broken or how to fix it \u2014 that's gated behind the $49 Launch Fix Kit
|
|
4440
4440
|
(unlocks full findings + 46-item workbook + paste-ready AI-builder prompts +
|
|
4441
|
-
verification steps + red-flag checks). Read-only on disk. Anonymous
|
|
4442
|
-
|
|
4443
|
-
|
|
4444
|
-
or opt-out flag. Exit code non-zero if any critical findings.
|
|
4441
|
+
verification steps + red-flag checks). Read-only on disk. Anonymous Wall stats
|
|
4442
|
+
(score, severity counts, file count, scanner version \u2014 no project name, no
|
|
4443
|
+
paths, no finding-level detail) are sent on every normal run; there is no
|
|
4444
|
+
publish opt-in or opt-out flag. Exit code non-zero if any critical findings.
|
|
4445
4445
|
`
|
|
4446
4446
|
);
|
|
4447
4447
|
}
|
|
@@ -4461,7 +4461,7 @@ async function run() {
|
|
|
4461
4461
|
}
|
|
4462
4462
|
if (opts.unsupportedWallFlag) {
|
|
4463
4463
|
process2.stderr.write(
|
|
4464
|
-
`${opts.unsupportedWallFlag} is not supported. shippingszn sends anonymous score
|
|
4464
|
+
`${opts.unsupportedWallFlag} is not supported. shippingszn sends anonymous Wall stats on normal runs: score, severity counts, file count, scanner version, and safe stack tags. It never uploads code, file paths, finding-level details, project names, repo URLs, secrets, emails, or handles.
|
|
4465
4465
|
`
|
|
4466
4466
|
);
|
|
4467
4467
|
return 2;
|
|
@@ -4786,7 +4786,7 @@ ${c.bold("shippingszn")} ${c.dim(`v${PKG_VERSION}`)}
|
|
|
4786
4786
|
}
|
|
4787
4787
|
if (publishResult === "published") {
|
|
4788
4788
|
process2.stdout.write(
|
|
4789
|
-
c.dim("(Anonymous
|
|
4789
|
+
c.dim("(Anonymous Wall stats sent: score + severity counts.)\n")
|
|
4790
4790
|
);
|
|
4791
4791
|
}
|
|
4792
4792
|
if (totals.critical > 0) {
|
package/package.json
CHANGED